427be8771bae64ba3f18a7b55f09bfe3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

427be8771bae64ba3f18a7b55f09bfe3_JaffaCakes118
Size

244KB
MD5

427be8771bae64ba3f18a7b55f09bfe3
SHA1

a0a0c5339ef6f3afc89a9c7011eba349891ad3b8
SHA256

8629e2232e598ae992d9921b72845f94e65e40d3c7e3039d991a455a59635e1b
SHA512

5410e9d69d0789f4d1141b54b453b74cb086b1e52743fa0d5700fcbeff959c89c3d8009131d982e23a2b9f7a05b7fc76bcaed50b050ef7ca10835e2d304ad56b
SSDEEP

3072:D1vmJ+8QTjD4v1pUb9Npa+0zKmC60NZZAYtxqCZXL6bZKW6kv9vqMlTLha7aLW08:ZV8Q781O9NMRa6crF6V9JBr1gFc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
427be8771bae64ba3f18a7b55f09bfe3_JaffaCakes118

Files

427be8771bae64ba3f18a7b55f09bfe3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

acc4ce8c6a946ec26e65445618b6faf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndPaint
RedrawWindow
ReleaseDC
GetDC
SendMessageA
UnregisterClassA
GetClientRect
PtInRect
ScreenToClient
GetCursorPos
DefWindowProcA
SetWindowLongA
GetWindowLongA
CallWindowProcA
ShowWindow
DispatchMessageA
TranslateMessage
BeginPaint
IsDialogMessageA
CreateDialogParamA
CharNextA
PostQuitMessage
LoadImageA
DialogBoxParamA
GetActiveWindow
EndDialog
GetParent
SetWindowPos
MapWindowPoints
SystemParametersInfoA
GetWindowRect
GetWindow
GetSystemMetrics
CreateWindowExA
RegisterClassExA
LoadCursorA
GetClassInfoExA
PeekMessageA
wsprintfA
MessageBoxA

kernel32

SetHandleCount
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
HeapAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

acc4ce8c6a946ec26e65445618b6faf0

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 115KB - Virtual size: 115KB

.rdata Size: 120KB - Virtual size: 120KB

.data Size: 7KB - Virtual size: 9KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 115KB - Virtual size: 115KB

.rdata
Size: 120KB - Virtual size: 120KB

.data
Size: 7KB - Virtual size: 9KB

.rsrc
Size: 3KB - Virtual size: 3KB